Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/1NsZsrIxFop12xtaec4fEtKrk5E.roa
File: 1NsZsrIxFop12xtaec4fEtKrk5E.roa (raw, json)
Hash identifier: D6GECz4HoeW5uepmib2Ax6lcNteQcgpSzaGzjwiAGp0=
Subject key identifier: D4:DB:19:B2:B2:31:16:8A:75:DB:1B:5A:79:CE:1F:12:D2:AB:93:91
Certificate issuer: /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial: 0194F9C8A0440550AD89FD994E175895A1EC
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/1NsZsrIxFop12xtaec4fEtKrk5E.roa
Signing time: Wed 12 Feb 2025 10:51:02 +0000
ROA not before: Wed 12 Feb 2025 10:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9186
IP address blocks: 62.233.41.0/24 maxlen: 24
185.31.156.0/22 maxlen: 22
185.31.156.0/24 maxlen: 24
185.31.157.0/24 maxlen: 24
185.31.158.0/24 maxlen: 24
185.31.159.0/24 maxlen: 24
185.90.56.0/22 maxlen: 22
185.90.56.0/24 maxlen: 24
185.90.57.0/24 maxlen: 24
185.90.58.0/24 maxlen: 24
185.90.59.0/24 maxlen: 24
185.204.111.0/24 maxlen: 24
185.248.35.0/24 maxlen: 24
194.39.124.0/22 maxlen: 22
194.39.124.0/24 maxlen: 24
194.39.125.0/24 maxlen: 24
194.39.126.0/24 maxlen: 24
194.39.127.0/24 maxlen: 24
2a00:bc20::/32 maxlen: 32
2a05:df40::/29 maxlen: 29
2a10:7b40::/29 maxlen: 29
2a10:a4c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Feb 2025 01:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:c8:a0:44:05:50:ad:89:fd:99:4e:17:58:95:a1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Validity
Not Before: Feb 12 10:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4db19b2b231168a75db1b5a79ce1f12d2ab9391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:f9:00:84:c8:ad:1c:54:f1:e3:a1:74:9a:
b0:a4:af:62:dd:36:d8:f4:8b:31:cd:97:f9:ef:96:
c4:6e:c0:fb:2b:de:d7:86:90:32:26:8f:21:a4:33:
33:4e:35:39:0a:69:1a:b7:e9:5b:e9:bf:77:91:d6:
fe:d8:a0:18:04:a3:34:2a:76:65:a3:ea:e5:9a:84:
e7:f0:51:db:8a:1c:d9:a7:7b:e3:d4:ef:59:9e:9f:
6e:81:0b:5a:df:a2:a3:f6:29:86:4e:7c:12:1c:df:
88:9f:e2:13:69:f7:cc:2d:0d:c1:9c:2c:31:af:d6:
5f:1a:c2:b1:dc:65:e8:f2:a3:21:49:a8:c9:27:69:
07:08:2e:1d:d5:86:46:71:bf:f2:d9:e7:be:da:1c:
5d:ce:30:73:d3:5f:80:80:ba:4f:9a:b8:1a:ac:2d:
96:e6:21:98:d0:c1:24:18:25:3c:4b:71:34:01:66:
d8:94:79:22:e0:53:6d:cd:ba:f4:42:64:a0:1c:eb:
eb:db:24:fa:6a:28:09:4e:c7:77:cd:b9:48:df:33:
72:f3:f7:0e:e1:00:fd:ba:36:c4:94:f1:8d:fb:33:
47:2a:a5:ce:73:39:09:c8:95:bf:f7:28:28:cd:1a:
c2:86:da:b3:b2:84:f7:55:d6:54:a1:36:9d:26:6d:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:19:B2:B2:31:16:8A:75:DB:1B:5A:79:CE:1F:12:D2:AB:93:91
X509v3 Authority Key Identifier:
keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/1NsZsrIxFop12xtaec4fEtKrk5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.41.0/24
185.31.156.0/22
185.90.56.0/22
185.204.111.0/24
185.248.35.0/24
194.39.124.0/22
IPv6:
2a00:bc20::/32
2a05:df40::/29
2a10:7b40::/29
2a10:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
74:f6:22:cd:cb:19:de:bb:9e:aa:63:4e:07:32:25:0c:55:6e:
d5:0a:48:4f:ec:39:a2:2d:be:25:b9:ff:ec:6c:70:71:54:f9:
bd:95:bd:8d:e3:cf:c7:11:f5:a2:70:d3:23:c7:fc:7a:1b:fa:
2f:f2:c3:a6:e8:ed:95:82:21:2b:a4:2e:00:9e:02:65:49:e3:
07:39:44:34:e1:72:c6:98:46:22:c1:2c:56:ea:d9:26:13:55:
c6:a4:1d:e3:74:38:ee:39:85:85:d0:57:3a:2c:2d:27:7b:0f:
dc:71:ef:61:67:2d:30:45:d1:35:d5:18:fa:36:6e:21:b0:55:
af:47:bd:d7:a3:05:5b:5a:b2:b1:f4:d1:24:64:eb:f6:17:cd:
bf:92:b1:61:87:ee:ca:d8:94:c3:5f:2b:5f:0e:89:2f:43:72:
91:70:ca:31:0c:e3:ad:f8:4a:4a:16:76:5c:b9:2c:fc:65:5d:
ae:f3:00:0e:d5:48:8f:3f:5b:80:e6:b7:b2:bf:66:5c:f4:e3:
29:f9:9f:95:56:12:51:12:0e:1d:6f:a6:23:7b:72:58:d8:81:
dc:32:d5:ee:8c:01:10:2c:19:7c:84:3e:88:52:ee:7b:4e:e6:
08:f9:71:69:b8:90:2c:e8:87:4a:f4:06:50:16:24:b9:34:44:
57:ef:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:10:01 2025 by rpki-client